Skip to main content
M
matts54643606
Known Participant
January 3, 2018
Question

Flash Background Updates from internal server not working

  • January 3, 2018
  • 2 replies
  • 4926 views

We are setting up to receive flash background updates from an internal server for our 5000+ enterprise pcs running windows 7 64bit and Windows 10

Current mms.cfg

AutoUpdateDisable=0
SilentAutoUpdateEnable=1
SilentAutoUpdateServerDomain=SVRTSTR2
SilentAutoUpdateVerboseLogging=1

Note- the server is running server 2016, with IIS, and the website is set up with an SSL certificate and the cab files were extracted to the site with the correct folder structure

Here is the log:

2018-1-3+3-4-0.217 [info] 1629 SVRTSTR2

2018-1-3+3-4-0.220 [info] 1614

2018-1-3+3-4-0.222 [info] 1615

2018-1-3+3-4-0.224 [info] 1618

2018-1-3+3-4-0.226 [info] 1604

2018-1-3+3-4-0.226 [info] 1608

2018-1-3+3-4-0.227 [info] 1612

2018-1-3+3-4-0.232 [info] 1620

2018-1-3+4-4-0.198 [info] 1629 SVRTSTR2

2018-1-3+4-4-0.199 [info] 1614

2018-1-3+4-4-0.201 [info] 1615

2018-1-3+4-4-0.204 [info] 1618

2018-1-3+4-4-0.207 [info] 1619 1063

2018-1-3+4-4-0.228 [info] 1629 SVRTSTR2

2018-1-3+4-4-0.232 [info] 1614

2018-1-3+4-4-0.234 [info] 1615

2018-1-3+4-4-0.236 [info] 1618

2018-1-3+4-4-0.238 [info] 1604

2018-1-3+4-4-0.238 [info] 1608

2018-1-3+4-4-0.238 [info] 1612

2018-1-3+4-4-0.239 [info] 1620

2018-1-3+5-4-0.181 [info] 1629 SVRTSTR2

2018-1-3+5-4-0.181 [info] 1614

2018-1-3+5-4-0.184 [info] 1615

2018-1-3+5-4-0.186 [info] 1618

2018-1-3+5-4-0.190 [info] 1619 1063

2018-1-3+5-4-0.212 [info] 1629 SVRTSTR2

2018-1-3+5-4-0.215 [info] 1614

2018-1-3+5-4-0.217 [info] 1615

2018-1-3+5-4-0.219 [info] 1618

2018-1-3+5-4-0.220 [info] 1604

2018-1-3+5-4-0.220 [info] 1608

2018-1-3+5-4-0.228 [info] 1631 /pub/flashplayer/update/current/sau/currentmajor.xml

2018-1-3+5-4-0.320 [warning] 1470 12175

2018-1-3+5-4-0.321 [warning] 1474 183

2018-1-3+5-4-0.321 [warning] 1475

2018-1-3+5-4-0.322 [info] 1432

2018-1-3+5-4-0.322 [info] 1612

2018-1-3+5-4-0.323 [info] 1620

2018-1-3+6-4-0.259 [info] 1629 SVRTSTR2

2018-1-3+6-4-0.260 [info] 1614

2018-1-3+6-4-0.263 [info] 1615

2018-1-3+6-4-0.265 [info] 1618

2018-1-3+6-4-0.268 [info] 1619 1063

2018-1-3+6-4-0.295 [info] 1629 SVRTSTR2

2018-1-3+6-4-0.297 [info] 1614

2018-1-3+6-4-0.299 [info] 1615

2018-1-3+6-4-0.301 [info] 1618

2018-1-3+6-4-0.303 [info] 1608

2018-1-3+6-4-0.303 [info] 1604

2018-1-3+6-4-0.303 [info] 1612

2018-1-3+6-4-0.304 [info] 1620

2018-1-3+7-4-0.328 [info] 1629 SVRTSTR2

2018-1-3+7-4-0.328 [info] 1614

2018-1-3+7-4-0.331 [info] 1615

2018-1-3+7-4-0.333 [info] 1618

2018-1-3+7-4-0.335 [info] 1619 1063

Please assist

NOTE:

-I have already tried deleting the reg key HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Macromedia\FlashPlayerSAU\LastUpdateCheck

-I have imported the Cert to the Trusted Root Certification Authorities store (local computer) on the workstation

I can view the files on a browser(firefox/chrome/IE11) from the workstation by entering https://svrtstr2/ --I get the IIS landing page, and can navigate the folder strucure all the way through without error

    This topic has been closed for replies.

    2 replies

    jeromiec83223024
    jeromiec83223024
    Inspiring
    February 9, 2018

    No, sorry.  When we attempt to retrieve the XML file, the server is requiring a client-side authentication certificate, and the request fails.  It's a configuration issue.  Do you have someone on staff that's really good with IIS and network debugging tools?  You might have them take a look and see what's different about the requests when the browser makes them vs. the installer.  I think that would be very telling.  As an aside, something like Charles Web Proxy might be more friendly than Wireshark, particularly for debugging HTTPS traffic.

    _maria_
    _maria_
    Legend
    January 3, 2018

    Thank you for posting the log file with background update verbose logging enabled.  Very helpful.

    The request to the /pub/flashplayer/update/current/sau/currentmajor.xml is failing, due to Microsoft error code 12175.  From Error Messages (Windows) :

    ERROR_WINHTTP_SECURE_FAILURE

    12175

    One or more errors were found in the Secure Sockets Layer (SSL) certificate sent by the server. To determine what type of error was encountered, check for a WINHTTP_CALLBACK_STATUS_SECURE_FAILURE notification in a status callback function. For more information, see WINHTTP_STATUS_CALLBACK.

    A few things to check:

    • Ensure you have opened port 443 for HTTPS requests
    • Ensure the SSL certificate matches the domain you are attempting to use it on
    • In your mms.cfg file, is the local server configured as just SVRTSTR2, or is it in your.server.com format?  If not in your.server.com format, please change it to this format.
    • Attempt to access the currentmajor.xml file from a web browser.  It should be accessible.

    Note that Flash Player ActiveX will not install on Windows 10 as Microsoft integrates Flash Player ActiveX in IE and Edge browsers and all Flash Player ActiveX for IE/Edge are released by Microsoft via Windows Update.

    <EDIT>

    Not sure if I missed the screenshots, or if you posted them after.  According to the screenshots, the SSL cert is issued to flashupdates.kaplanic.com but this is not what you have in the mms.cfg file.

    <EDIT_2>
    The IE screenshot also shows a certificate error.  This is most likely the culprit. Please resolve the certificate error and try again.

    M
    matts54643606Author
    Known Participant
    January 12, 2018

    Hello,

    I have a new cert with the correct domain:

    I deleted the reg key:

    I set the 443 bindings on the server:

    I'm still not getting updated:

    2018-1-12+14-29-18.383 [info] 1631 /pub/flashplayer/update/current/sau/currentmajor.xml

    2018-1-12+14-29-18.476 [warning] 1470 12175

    2018-1-12+14-29-18.476 [warning] 1474 183

    2018-1-12+14-29-18.477 [warning] 1475

    2018-1-12+14-29-18.477 [info] 1432

    2018-1-12+14-29-18.479 [info] 1612

    2018-1-12+14-29-18.479 [info] 1620

    2018-1-12+14-51-55.75 [info] 1629 SVRTSTR2.charlie.kaplaninc.com

    2018-1-12+14-51-55.76 [info] 1614

    2018-1-12+14-51-55.78 [info] 1615

    2018-1-12+14-51-55.81 [info] 1618

    2018-1-12+14-51-55.84 [info] 1619 1063

    2018-1-12+14-51-55.111 [info] 1629 SVRTSTR2.charlie.kaplaninc.com

    2018-1-12+14-51-55.113 [info] 1614

    2018-1-12+14-51-55.115 [info] 1615

    2018-1-12+14-51-55.117 [info] 1618

    2018-1-12+14-51-55.119 [info] 1604

    2018-1-12+14-51-55.119 [info] 1608

    2018-1-12+14-51-55.134 [info] 1631 /pub/flashplayer/update/current/sau/currentmajor.xml

    2018-1-12+14-51-55.191 [warning] 1470 12175

    2018-1-12+14-51-55.191 [warning] 1474 183

    2018-1-12+14-51-55.192 [warning] 1475

    2018-1-12+14-51-55.192 [info] 1432

    2018-1-12+14-51-55.194 [info] 1612

    2018-1-12+14-51-55.195 [info] 1620

    _maria_
    _maria_
    Legend
    January 12, 2018

    It's failing due to the same reason as before.

    Your most recent screenshot indicates the certificate is assigned to flashupdates.charlie.kaplaninc.com, but the log file has SVRTSTR2.charlie.kaplaninc.com  The server domain names are not the same.  Please use flashupdates.charlie.kaplaninc.com in the mms.cfg file instead of SVRTSTR2.charlie.kaplaninc.com.  If you need to use SVRTSTR2.charlie.kaplaninc.com, then you'll need to get a certificate with that name.

      Firefly Community Gallery
      Adobe Firefly

      Remix with Firefly Community Gallery

      Thousands of free creations to fall in love with and remix in Firefly.

      Explore now
      Terms & ConditionsAccessibility statement
      Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices